fifa.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since fifa.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset=utf-8

Cache-Control

public, max-age=60

Content-Encoding

Not sent

Security

Content-Security-Policy

script-src 'self' 'unsafe-inline' 'unsafe-eval' *.2mdn.net *.theoplayer.com *.youtube.com cdnjs.cloudflare.com vjs.zencdn.net static.tagboard.com *.minute.ly blob: *.flourish.studio fifa.eu.qualtrics.com *.fifa.com *.adnxs.com *.crwdcntrl.net *.doubleclick.net *.doubleclick.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.googleanalytics.com *.googlevideo.com *.tpcsyndication.com *.nice264.com *.npaw.com *.tealiumiq.com *.tiqcdn.cn *.tiqcdn.com *.youbora.com *.youborafds01.com *.youboranqs01.com *.youboranqs02.com *.gstatic.com adservice.google.cn adservice.google.co.uk adservice.google.com adservice.google.es analytics.twitter.com assets.adobedtm.com cdn.cookielaw.org connect.facebook.net dc.services.visualstudio.com dpm.demdex.net fifa.hb-api.omtrdc.net platform.twitter.com sc-static.net static.ads-twitter.com tr.snapchat.com *.conviva.com *.instagram.com *.tiktok.com *.ttwstatic.com *.tiktokcdn.com *.tiktokcdn-us.com *.2mdn.net *.fifa.gg api.pingone.eu walls.io *.minute.ly *.pingone.com *.pingone.eu *.x.com *.google.com *.google.ad *.google.ae *.google.com.af *.google.com.ag *.google.com.ai *.google.al *.google.am *.google.co.ao *.google.com.ar *.google.as *.google.at *.google.com.au *.google.az *.google.ba *.google.com.bd *.google.be *.google.bf *.google.bg *.google.com.bh *.google.bi *.google.bj *.google.com.bn *.google.com.bo *.google.com.br *.google.bs *.google.bt *.google.co.bw *.google.by *.google.com.bz *.google.ca *.google.cd *.google.cf *.google.cg *.google.ch *.google.ci *.google.co.ck *.google.cl *.google.cm *.google.cn *.google.com.co *.google.co.cr *.google.com.cu *.google.cv *.google.com.cy *.google.cz *.google.de *.google.dj *.google.dk *.google.dm *.google.com.do *.google.dz *.google.com.ec *.google.ee *.google.com.eg *.google.es *.google.com.et *.google.fi *.google.com.fj *.google.fm *.google.fr *.google.ga *.google.ge *.google.gg *.google.com.gh *.google.com.gi *.google.gl *.google.gm *.google.gr *.google.com.gt *.google.gy *.google.com.hk *.google.hn *.google.hr *.google.ht *.google.hu *.google.co.id *.google.ie *.google.co.il *.google.im *.google.co.in *.google.iq *.google.is *.google.it *.google.je *.google.com.jm *.google.jo *.google.co.jp *.google.co.ke *.google.com.kh *.google.ki *.google.kg *.google.co.kr *.google.com.kw *.google.kz *.google.la *.google.com.lb *.google.li *.google.lk *.google.co.ls *.google.lt *.google.lu *.google.lv *.google.com.ly *.google.co.ma *.google.md *.google.me *.google.mg *.google.mk *.google.ml *.google.com.mm *.google.mn *.google.ms *.google.com.mt *.google.mu *.google.mv *.google.mw *.google.com.mx *.google.com.my *.google.co.mz *.google.com.na *.google.com.ng *.google.com.ni *.google.ne *.google.nl *.google.no *.google.com.np *.google.nr *.google.nu *.google.co.nz *.google.com.om *.google.com.pa *.google.com.pe *.google.com.pg *.google.com.ph *.google.com.pk *.google.pl *.google.pn *.google.com.pr *.google.ps *.google.pt *.google.com.py *.google.com.qa *.google.ro *.google.ru *.google.rw *.google.com.sa *.google.com.sb *.google.sc *.google.se *.google.com.sg *.google.sh *.google.si *.google.sk *.google.com.sl *.google.sn *.google.so *.google.sm *.google.sr *.google.st *.google.com.sv *.google.td *.google.tg *.google.co.th *.google.com.tj *.google.tl *.google.tm *.google.tn *.google.to *.google.com.tr *.google.tt *.google.com.tw *.google.co.tz *.google.com.ua *.google.co.ug *.google.co.uk *.google.com.uy *.google.co.uz *.google.com.vc *.google.co.ve *.google.vg *.google.co.vi *.google.com.vn *.google.vu *.google.ws *.google.rs *.google.co.za *.google.co.zm *.google.co.zw *.google.cat *.google.ly *.appsflyer.com *.appsflyersdk.com *.usestoryteller.com;worker-src 'self' blob:;script-src-attr 'unsafe-inline';default-src 'unsafe-inline' blob:;manifest-src 'self' 'unsafe-inline' blob:;style-src 'self' 'unsafe-inline' cdnjs.cloudflare.com *.ttwstatic.com *.usestoryteller.com;img-src 'self' 'unsafe-inline' data: blob: *;media-src 'self' 'unsafe-inline' data: blob: *;connect-src 'self' localhost:* cxm-dev-gl-afd-001-apis-fifa-bcfmhrbneqb6e0ee.z01.azurefd.net fifa-rewards-webapp-dev-acp-hwbta4bza3a7gyau.westeurope-01.azurewebsites.net cxm-dev-gl-afd-001-apis-fifa.azurefd.net cxm-uat-gl-afd-001-apis-fifa.azurefd.net *.cloudfront.net *.fifa.gg *.smartmedialabs.io apice.smartmediatech.io *.embedded.smartmedialabs.io *.embedded.smtwallet.app *.fifa.org *.mycujoo.tv *.mcls.live *.p5cdn.com *.theoplayer.com *.youtube.com *.uplynk.com *.minute.ly *.onetrust.com mycujoo-static-fastly.images.mcls.live cpt-services-fastly.images.mcls.live mycujoo-assets-fastly.images.mcls.live m-tv-fastly.images.mcls.live mycujoo-thumbs-fastly.images.mcls.live wss://mls-rt.mycujoo.tv *.flourish.studio cxm-dev-we-fas-001-search-api.azurewebsites.net cxm-uat-we-fas-001-search-api.azurewebsites.net fifa.eu.qualtrics.com gameday-uat.fifa.mangodev.co.uk gameday-prod.fifa.mangodev.co.uk *.fifa.com *.adnxs.com *.crwdcntrl.net *.doubleclick.net *.doubleclick.com *.googleadservices.com *.googleapis.com *.googlesyndication.com *.googletagmanager.com *.googletagservices.com *.googleanalytics.com *.googlevideo.com *.tpcsyndication.com *.nice264.com *.npaw.com *.tealiumiq.com *.tiqcdn.cn *.tiqcdn.com *.youbora.com *.youborafds01.com *.youboranqs01.com *.youboranqs02.com *.gstatic.com adservice.google.cn adservice.google.co.uk adservice.google.com adservice.google.es analytics.twitter.com assets.adobedtm.com cdn.cookielaw.org connect.facebook.net dc.services.visualstudio.com dpm.demdex.net fifa.hb-api.omtrdc.net platform.twitter.com sc-static.net static.ads-twitter.com tr.snapchat.com *.conviva.com *.instagram.com *.tiktok.com *.ttwstatic.com *.tiktokcdn.com *.tiktokcdn-us.com *.2mdn.net *.fifa.gg api.pingone.eu walls.io *.minute.ly *.pingone.com *.pingone.eu *.x.com *.appsflyer.com *.appsflyersdk.com *.usestoryteller.com;frame-ancestors 'self' https://apps.monterosa.cloud https://mtsa-blog.fifa.com;frame-src 'self' *.fifa.com *.doubleclick.net *.googlesyndication.com *.googleapis.com *.theoplayer.com *.walls.io *.flourish.studio *.spotify.com *.usestoryteller.com https://flo.uri.sh/ https://www.fifa.gg/ https://fifa.demdex.net/ https://tags.crwdcntrl.net/ https://tr.snapchat.com/ https://www.facebook.com/ https://m.facebook.com/ https://www.google.com/ https://www.youtube.com/ https://platform.twitter.com/ https://www.instagram.com/ https://scontent.cdninstagram.com/ https://www.tiktok.com/ https://fifa-interest-page-dev-app.azurewebsites.net https://fifa-interest-page-qa-app.azurewebsites.net/ https://fifa-interest-page-prd-app.azurewebsites.net/ https://fifa-registration-of-interest-qa-app.azurewebsites.net/ https://fifa-registration-of-interest-prd-app.azurewebsites.net/ https://apps.monterosa.cloud https://mtsa-blog.fifa.com https://embed.tagboard.com https://fifa.eu.qualtrics.com https://embed.podcasts.apple.com https://connect.us.app.pam.co *.airbnb.ae *.airbnb.am *.airbnb.at *.airbnb.az *.airbnb.ba *.airbnb.be *.airbnb.ca *.airbnb.cat *.airbnb.ch *.airbnb.cl *.airbnb.cn *.airbnb.co.cr *.airbnb.co.id *.airbnb.co.in *.airbnb.co.kr *.airbnb.co.nz *.airbnb.co.uk *.airbnb.co.ve *.airbnb.co.za *.airbnb.com *.airbnb.com.ar *.airbnb.com.au *.airbnb.com.bo *.airbnb.com.br *.airbnb.com.bz *.airbnb.com.co *.airbnb.com.ec *.airbnb.com.ee *.airbnb.com.gt *.airbnb.com.hk *.airbnb.com.hn *.airbnb.com.mt *.airbnb.com.my *.airbnb.com.ni *.airbnb.com.pa *.airbnb.com.pe *.airbnb.com.ph *.airbnb.com.py *.airbnb.com.ro *.airbnb.com.sg *.airbnb.com.sv *.airbnb.com.tr *.airbnb.com.tw *.airbnb.com.ua *.airbnb.com.vn *.airbnb.cz *.airbnb.de *.airbnb.dk *.airbnb.es *.airbnb.fi *.airbnb.fr *.airbnb.gr *.airbnb.gy *.airbnb.hu *.airbnb.ie *.airbnb.is *.airbnb.it *.airbnb.jp *.airbnb.lt *.airbnb.lu *.airbnb.lv *.airbnb.me *.airbnb.mx *.airbnb.nl *.airbnb.no *.airbnb.pl *.airbnb.pt *.airbnb.rs *.airbnb.ru *.airbnb.se *.airbnb.si https://embedded.smartmedialabs.io/ https://embedded.smtwallet.app/ *.x.com *.service-now.com;form-action 'self' https://tr.snapchat.com/ https://www.facebook.com/;base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;object-src 'none';upgrade-insecure-requests

Strict-Transport-Security

max-age=15552000; includeSubDomains

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

strict-origin-when-cross-origin

Permissions-Policy

Not sent

What each security header does

Redirect chain

1. 1.http://fifa.com/HTTP 301

   → https://www.fifa.com/

2. 2.https://www.fifa.com/HTTP 200

Meta tags

Title

Not set

Description

Not set

Canonical

Not set

Robots

Not set

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

3

Disallow rules (other agents)

0

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains